adding adding ignore for CVE-2024-8775 (#111)

Signed-off-by: Adam D. Cornett <[email protected]>
operator-framework · Oct 22, 2024 · 4e0c617 · 4e0c617
1 parent acf7594
commit 4e0c617
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 3 deletions.
diff --git a/images/ansible-operator/Dockerfile b/images/ansible-operator/Dockerfile
@@ -34,8 +34,11 @@ RUN set -e && dnf clean all && rm -rf /var/cache/dnf/* \
   #  - https://data.safetycli.com/v/70612/97c/ \
   # NOTE: This ignored vulnerability (71064) was detected in requests, \
   # but the upgraded version doesn't support the use case (protocol we are using).\
-  # Ref: https://github.com/operator-framework/ansible-operator-plugins/pull/67#issuecomment-2189164688
-  && pipenv check --ignore 70612 --ignore 71064 \
+  # Ref: https://github.com/operator-framework/ansible-operator-plugins/pull/67#issuecomment-2189164688 \
+  # NOTE: This ignored vulnerability (73302) was detected in ansible-core, \
+  # but hasn't been fixed upstream yet.\
+  # Ref: https://github.com/operator-framework/ansible-operator-plugins/issues/109 \
+  && pipenv check --ignore 70612 --ignore 71064 --ignore 73302 \
   && dnf remove -y gcc libffi-devel openssl-devel python3.12-devel \
   && dnf clean all \
   && rm -rf /var/cache/dnf

diff --git a/images/ansible-operator/pipfile.Dockerfile b/images/ansible-operator/pipfile.Dockerfile
@@ -31,7 +31,10 @@ RUN set -e && dnf clean all && rm -rf /var/cache/dnf/* \
   # NOTE: This ignored vulnerability (71064) was detected in requests, \
   # but the upgraded version doesn't support the use case (protocol we are using).\
   # Ref: https://github.com/operator-framework/ansible-operator-plugins/pull/67#issuecomment-2189164688
-  && pipenv check --ignore 70612 --ignore 71064 \
+  # NOTE: This ignored vulnerability (73302) was detected in ansible-core, \
+  # but hasn't been fixed upstream yet.\
+  # Ref: https://github.com/operator-framework/ansible-operator-plugins/issues/109 \
+  && pipenv check --ignore 70612 --ignore 71064 --ignore 73302 \
   && dnf remove -y gcc libffi-devel openssl-devel python3.12-devel \
   && dnf clean all \
   && rm -rf /var/cache/dnf